Static task
static1
Behavioral task
behavioral1
Sample
08a7338e7123f9a20112e3d488d0f303_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
08a7338e7123f9a20112e3d488d0f303_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
08a7338e7123f9a20112e3d488d0f303_JaffaCakes118
-
Size
29KB
-
MD5
08a7338e7123f9a20112e3d488d0f303
-
SHA1
915dd889cf873300ad5a8af4a78d13a385aa882e
-
SHA256
a6f1d71a31868358c2c8bb06ffff0255aea108dec26fb0e40aea015aa94d7db2
-
SHA512
22ec54e23838437e634b54ede353deb7146fb391373af31da4791aeabe463126a19751954f8b60926231ad4e62274a053dd20a1dca491bdc086605af19ff15c4
-
SSDEEP
768:eTKIJ9bIOLo3K3wkrKGz2FpeBHiJJ3qk/:eTf9sso6AkrKGqikD3H/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08a7338e7123f9a20112e3d488d0f303_JaffaCakes118
Files
-
08a7338e7123f9a20112e3d488d0f303_JaffaCakes118.exe windows:1 windows x86 arch:x86
91f60abb261c080f269b7b7ef572a1a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
ExitProcess
LoadLibraryA
GetProcAddress
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 231KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ